Lucene search

PRIOn knowledge basePRION:CVE-2015-5004

HistoryDec 15, 2015 - 5:59 a.m.

Information disclosure

2015-12-1505:59:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

44.3%

JSON

The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
websphere_application_servereq8.5.5.6
websphere_application_servereq8.5.0.2
websphere_application_servereq8.0.0.5
websphere_application_servereq8.0.0.11
websphere_application_servereq8.5.5.1
websphere_application_servereq8.0.0.7
websphere_application_servereq8.5.5.0
websphere_application_servereq8.0.0.1
websphere_application_servereq8.5.5.5
websphere_application_servereq8.0.0.4

Name	Operator	Version
websphere_application_server	eq	8.5.5.6
websphere_application_server	eq	8.5.0.2
websphere_application_server	eq	8.0.0.5
websphere_application_server	eq	8.0.0.11
websphere_application_server	eq	8.5.5.1
websphere_application_server	eq	8.0.0.7
websphere_application_server	eq	8.5.5.0
websphere_application_server	eq	8.0.0.1
websphere_application_server	eq	8.5.5.5
websphere_application_server	eq	8.0.0.4

Rows per page:

1-10 of 231

References

www-01.ibm.com/support/docview.wss?uid=swg1PI41476

www-01.ibm.com/support/docview.wss?uid=swg21966638

www.securitytracker.com/id/1034349

6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

44.3%

JSON

Related for PRION:CVE-2015-5004